io.github.YuzuKyouma/ponzu

NPM · @PONZU_APP/MCP · SCANNED AUG 3

ERC-20 token launchpad on Ethereum — deploy, presale, swap, and farm via AI agents

Available components

+35 this week 53 53 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security70

No malware found by supply-chain analysis.Pass
CVE check failed: a known high-severity CVE affects @modelcontextprotocol/sdk 1.11.4, a direct dependency. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (103 of 107), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency6

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
License check failed: the license (UNLICENSED) isn't a recognized OSI-approved license. See how to fix → Fail
Actively maintained (last published 137 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability75

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 1454 tokens (~85/item across 17 items; 17 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities40

Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @ponzu_app/mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add yuzukyouma-ponzu -- npx -y @ponzu_app/mcp

# add to Codex CLI

codex mcp add yuzukyouma-ponzu -- npx -y @ponzu_app/mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "yuzukyouma-ponzu": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@ponzu_app/mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add yuzukyouma-ponzu --command npx --arg -y --arg @ponzu_app/mcp

# ~/.hermes/config.yaml

mcp_servers:
  yuzukyouma-ponzu:
    command: "npx"
    args: ["-y", "@ponzu_app/mcp"]

// mcp.json

{
  "mcpServers": {
    "yuzukyouma-ponzu": {
      "command": "npx",
      "args": [
        "-y",
        "@ponzu_app/mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +37
- CVE-2026-0621 affects this package: high ▼ security
- CVE-2026-25536 affects this package: high ▼ security
- CVE-2025-66414 affects this package: high ▼ security
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- MCP protocol: unverified → fail ▼ functional
- License: unverified → fail ▼ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: UNLICENSED functional
31 Jul 26 −24
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 +22
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: unverified functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
- First check of Schema quality: pass functional
27 Jul 26 18

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@ponzu_app/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 3 findings

ID	CVE	Severity	Vector	Fix available
GHSA-345p-7cg4-v4c7	CVE-2026-25536	high	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N	yes
GHSA-8r9q-7v3j-jr4g	CVE-2026-0621	high		yes
GHSA-w48q-cv73-mx4w	CVE-2025-66414	high		yes

Dependencies 103 packages

103 packages in the resolved dependency tree · 102 deprecated · 28 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 17 exposed · ~1,454 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

ponzu_calc_pricing ~99

Calculate the linear pricing curve for a Ponzu presale given a target ETH raise. Returns start price, end price (10x start), and encoded pricing data. Formula: 690,000 tokens sold on a linear curve. Minimum raise: 3 ETH mainnet, 0.1 ETH sepolia.

Input Output Examples

Name	Type	Req	Description
targetEthRaise	string	yes	Target ETH raise amount (e.g. "5" for 5 ETH)

No output schema declared.

No examples provided.

ponzu_claim_eth ~67

Claim ETH rewards from a Ponzu presale. Repeatable — can be called multiple times as more ETH flows into the presale from the Distributor.

Input Output Examples

Name	Type	Req	Description
presaleAddress	string	yes	Presale contract address
tokenId	string	yes	PonzuBottle NFT token ID

No output schema declared.

No examples provided.

ponzu_claim_tokens ~81

Claim vested tokens from a Ponzu presale. One-time claim per PonzuBottle NFT. If claimed before vesting completes (10 days), unvested portion goes to Distributor. Burns the PonzuBottle NFT.

Input Output Examples

Name	Type	Req	Description
presaleAddress	string	yes	Presale contract address
tokenId	string	yes	PonzuBottle NFT token ID

No output schema declared.

No examples provided.

ponzu_deploy ~209

Deploy a full Ponzu token system — 9 contracts in one transaction: ERC-20 token, presale, launcher, distributor, farm, project, operator, PonzuBottle NFT, and LiquidityCard NFT. Cost: 0.005 ETH creation fee + optional initial buy. Presale opens immediately after deployment.

Input Output Examples

Name	Type	Req	Description
imageURI	string	yes	Token image URI — IPFS, Arweave, or https://
initialBuyAmount	string	—	Dev buy amount in ETH (default: "0")
metadata	string	yes	Metadata URI — IPFS, Arweave, or https:// pointing to JSON
targetEthRaise	string	—	Target ETH raise (default: network minimum — 3 ETH mainnet, 0.1 ETH sepolia)
tokenName	string	yes	Name of the token (e.g. "My Token")
tokenSymbol	string	yes	Token ticker symbol (e.g. "MYTKN")

No output schema declared.

No examples provided.

ponzu_farm_claim ~68

Claim primary token rewards from a Ponzu farm. One-time claim per LiquidityCard. After claiming, no further token or ETH claims are possible for this card.

Input Output Examples

Name	Type	Req	Description
cardId	string	yes	LiquidityCard NFT ID
farmAddress	string	yes	Farm contract address

No output schema declared.

No examples provided.

ponzu_farm_claim_eth ~61

Claim WETH rewards from a Ponzu farm. Repeatable — call as rewards accumulate. Cannot claim after primary token claim.

Input Output Examples

Name	Type	Req	Description
cardId	string	yes	LiquidityCard NFT ID
farmAddress	string	yes	Farm contract address

No output schema declared.

No examples provided.

ponzu_farm_stake ~89

Stake LP tokens in a Ponzu farm. Mints a LiquidityCard NFT on first stake. Requires LP token approval first (handled automatically). Early unstake (<7 days) incurs penalty up to 100% LP.

Input Output Examples

Name	Type	Req	Description
farmAddress	string	yes	Farm contract address
lpAmount	string	yes	LP token amount to stake (e.g. "1.5")

No output schema declared.

No examples provided.

ponzu_farm_unstake ~89

Unstake LP tokens from a Ponzu farm. Full withdrawal only — burns the LiquidityCard NFT. If staked <7 days, early exit penalty applies (up to 100% LP forfeiture). Half of penalty boosts remaining stakers.

Input Output Examples

Name	Type	Req	Description
cardId	string	yes	LiquidityCard NFT ID to unstake
farmAddress	string	yes	Farm contract address

No output schema declared.

No examples provided.

ponzu_get_addresses ~41

Get all deployed Ponzu protocol contract addresses for the configured network. Returns factory, DEX, router, zap, WETH, and other protocol addresses.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

ponzu_get_presale_info ~54

Read the current state of a Ponzu presale contract. Returns tokens available, whether launched, launch time, total sold, and total purchases.

Input Output Examples

Name	Type	Req	Description
presaleAddress	string	yes	Presale contract address

No output schema declared.

No examples provided.

ponzu_get_skill ~53

Fetch the complete Ponzu skill documentation. Returns the full SKILL.md with instructions for deploying tokens, buying presales, swapping, farming, and all contract interactions. Use this first to understand how Ponzu works.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

ponzu_presale_buy ~112

Buy tokens in a Ponzu presale. Sends ETH and receives tokens at the current price on the linear curve. 4% fee: 1% creator, 1% protocol, 1% platform referrer, 1% order referrer.

Input Output Examples

Name	Type	Req	Description
ethAmount	string	yes	ETH amount to spend (e.g. "0.5")
minTokens	string	—	Minimum tokens to receive (slippage protection)
presaleAddress	string	yes	Presale contract address

No output schema declared.

No examples provided.

ponzu_presale_refund ~84

Refund tokens from a Ponzu presale. Available before launch only. 20% token penalty (stays in presale as pro-rata bonus for holders). 80% of proportional ETH returned.

Input Output Examples

Name	Type	Req	Description
presaleAddress	string	yes	Presale contract address
tokenAmount	string	yes	Token amount to refund (e.g. "1000")

No output schema declared.

No examples provided.

ponzu_swap_eth_for_tokens ~107

Buy tokens on PonzuSwap DEX by swapping ETH. 1% swap fee (20% in first hour after launch, decaying linearly). Uses PonzuRouter.swapExactETHForTokens.

Input Output Examples

Name	Type	Req	Description
ethAmount	string	yes	ETH amount to swap (e.g. "0.1")
slippage	string	—	Slippage tolerance as percentage (default "5" for 5%)
tokenAddress	string	yes	Token contract address to buy

No output schema declared.

No examples provided.

ponzu_swap_tokens_for_eth ~94

Sell tokens on PonzuSwap DEX for ETH. Requires token approval first (handled automatically). Uses PonzuRouter.swapExactTokensForETH.

Input Output Examples

Name	Type	Req	Description
slippage	string	—	Slippage tolerance as percentage (default "5" for 5%)
tokenAddress	string	yes	Token contract address to sell
tokenAmount	string	yes	Token amount to sell (e.g. "1000")

No output schema declared.

No examples provided.

ponzu_trigger_launch ~67

Trigger DEX launch for a Ponzu presale that has sold out. Creates the PonzuSwap liquidity pool with all raised ETH + 310,000 tokens. Anyone can call this once presale is sold out.

Input Output Examples

Name	Type	Req	Description
presaleAddress	string	yes	Presale contract address

No output schema declared.

No examples provided.

ponzu_zap_eth ~79

Convert ETH into LP tokens in one transaction. Splits ETH 50/50 — half buys tokens, half pairs with ETH to create LP. Uses ZapEth contract.

Input Output Examples

Name	Type	Req	Description
ethAmount	string	yes	ETH amount to zap (e.g. "0.5")
tokenAddress	string	yes	Token address to create LP for

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug